teamclaws 1.0.0

package/dist/http.js

@@ -0,0 +1,107 @@
+import { DEFAULT_CONNECT_TIMEOUT_MS, DEFAULT_RESPONSE_LIMIT_BYTES, MAX_ERROR_MESSAGE_LENGTH, } from "./constants.js";
+import { TeamClawsError } from "./errors.js";
+import { isObject } from "./validation.js";
+export async function requestJson(fetcher, url, options = {}) {
+    const timeout = AbortSignal.timeout(options.timeoutMs ?? DEFAULT_CONNECT_TIMEOUT_MS);
+    const signal = options.signal
+        ? AbortSignal.any([timeout, options.signal])
+        : timeout;
+    const headers = new Headers({
+        Accept: "application/json",
+        ...options.headers,
+    });
+    let body;
+    if (options.form) {
+        headers.set("Content-Type", "application/x-www-form-urlencoded");
+        body = options.form.toString();
+    }
+    else if (options.body !== undefined) {
+        headers.set("Content-Type", "application/json");
+        body = JSON.stringify(options.body);
+    }
+    let response;
+    try {
+        response = await fetcher(url, {
+            method: options.method ?? "GET",
+            headers,
+            ...(body === undefined ? {} : { body }),
+            redirect: "error",
+            signal,
+        });
+    }
+    catch (error) {
+        if (signal.aborted) {
+            throw new TeamClawsError("network_timeout", "TeamClaws did not respond in time.", {
+                retryable: true,
+                exitCode: 5,
+            });
+        }
+        void error;
+        throw new TeamClawsError("network_error", "TeamClaws could not be reached securely.", {
+            retryable: true,
+            exitCode: 5,
+        });
+    }
+    const contentLength = Number(response.headers.get("content-length") ?? 0);
+    const limit = options.responseLimitBytes ?? DEFAULT_RESPONSE_LIMIT_BYTES;
+    if (contentLength > limit) {
+        throw new TeamClawsError("response_too_large", "TeamClaws returned an oversized response.", {
+            exitCode: 9,
+        });
+    }
+    const contentType = response.headers
+        .get("content-type")
+        ?.split(";", 1)[0]
+        ?.trim();
+    if (contentType !== "application/json") {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned a non-JSON response.", {
+            exitCode: 9,
+        });
+    }
+    const text = await response.text();
+    if (Buffer.byteLength(text, "utf8") > limit) {
+        throw new TeamClawsError("response_too_large", "TeamClaws returned an oversized response.", {
+            exitCode: 9,
+        });
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned invalid JSON.", { exitCode: 9 });
+    }
+    return { status: response.status, headers: response.headers, body: parsed };
+}
+export function errorFromResponse(response, fallbackCode) {
+    if (!isObject(response.body)) {
+        return new TeamClawsError(fallbackCode, "TeamClaws rejected the request.", {
+            retryable: response.status >= 500,
+            exitCode: response.status === 401 ? 3 : 5,
+        });
+    }
+    const protocolError = isObject(response.body.error)
+        ? response.body.error
+        : response.body;
+    const code = safeProtocolString(protocolError.code, fallbackCode, 80);
+    const message = safeProtocolString(protocolError.message ?? protocolError.error, "TeamClaws rejected the request.", MAX_ERROR_MESSAGE_LENGTH);
+    const retryable = protocolError.retryable === true;
+    const retryAfter = Number(protocolError.retry_after_seconds);
+    return new TeamClawsError(code, message, {
+        retryable,
+        ...(Number.isInteger(retryAfter) && retryAfter > 0 && retryAfter <= 86_400
+            ? { retryAfterSeconds: retryAfter }
+            : {}),
+        exitCode: response.status === 401 ? 3 : response.status === 429 ? 5 : 1,
+    });
+}
+function safeProtocolString(value, fallback, maxLength) {
+    if (typeof value !== "string" ||
+        value.length === 0 ||
+        value.length > maxLength)
+        return fallback;
+    if ([...value].some((character) => character.charCodeAt(0) < 0x20))
+        return fallback;
+    return value;
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAoB3C,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAkB,EAClB,GAAW,EACX,UAA8B,EAAE;IAEhC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CACjC,OAAO,CAAC,SAAS,IAAI,0BAA0B,CAChD,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;QAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC;IACZ,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QAC1B,MAAM,EAAE,kBAAkB;QAC1B,GAAG,OAAO,CAAC,OAAO;KACnB,CAAC,CAAC;IACH,IAAI,IAAwB,CAAC;IAC7B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;QACjE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAChD,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,OAAO;YACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,QAAQ,EAAE,OAAO;YACjB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,cAAc,CACtB,iBAAiB,EACjB,oCAAoC,EACpC;gBACE,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,CAAC;aACZ,CACF,CAAC;QACJ,CAAC;QACD,KAAK,KAAK,CAAC;QACX,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,0CAA0C,EAC1C;YACE,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;IACzE,IAAI,aAAa,GAAG,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,cAAc,CACtB,oBAAoB,EACpB,2CAA2C,EAC3C;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO;SACjC,GAAG,CAAC,cAAc,CAAC;QACpB,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClB,EAAE,IAAI,EAAE,CAAC;IACX,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,yCAAyC,EACzC;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;QAC5C,MAAM,IAAI,cAAc,CACtB,oBAAoB,EACpB,2CAA2C,EAC3C;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,kCAAkC,EAClC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAAsB,EACtB,YAAoB;IAEpB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,cAAc,CAAC,YAAY,EAAE,iCAAiC,EAAE;YACzE,SAAS,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG;YACjC,QAAQ,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QACjD,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK;QACrB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAClB,MAAM,IAAI,GAAG,kBAAkB,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,kBAAkB,CAChC,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,KAAK,EAC5C,iCAAiC,EACjC,wBAAwB,CACzB,CAAC;IACF,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,KAAK,IAAI,CAAC;IACnD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC7D,OAAO,IAAI,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE;QACvC,SAAS;QACT,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,IAAI,MAAM;YACxE,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE;YACnC,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACxE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,QAAgB,EAChB,SAAiB;IAEjB,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,MAAM,GAAG,SAAS;QAExB,OAAO,QAAQ,CAAC;IAClB,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAChE,OAAO,QAAQ,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/output.js

@@ -0,0 +1,298 @@
+import { OUTPUT_SCHEMA_VERSION } from "./constants.js";
+export class Output {
+    json;
+    stdout;
+    stderr;
+    constructor(json, stdout = process.stdout, stderr = process.stderr) {
+        this.json = json;
+        this.stdout = stdout;
+        this.stderr = stderr;
+    }
+    loginBrowser(url) {
+        this.event({
+            schema_version: OUTPUT_SCHEMA_VERSION,
+            event: "login_browser_required",
+            url,
+        });
+        if (!this.json)
+            this.stdout.write(`${url}\n`);
+    }
+    pairingBrowser(url, userCode, agentAction) {
+        const event = {
+            schema_version: OUTPUT_SCHEMA_VERSION,
+            event: "pairing_browser_required",
+            url,
+            user_code: userCode,
+        };
+        if (agentAction)
+            event.agent_action = agentAction;
+        this.event(event);
+        if (!this.json) {
+            if (agentAction) {
+                this.stdout.write(agentAction.message_markdown);
+                if (!agentAction.message_markdown.endsWith("\n")) {
+                    this.stdout.write("\n");
+                }
+            }
+            else {
+                this.stdout.write(`Approve pairing in your browser:\n${url}\nPairing code: ${userCode}\n`);
+            }
+        }
+    }
+    loginComplete(user) {
+        this.event({
+            schema_version: OUTPUT_SCHEMA_VERSION,
+            event: "login_complete",
+            status: "success",
+            user,
+        });
+        if (!this.json)
+            this.stdout.write(`Signed in to TeamClaws as ${user.display_name} (${user.email}).\n`);
+    }
+    authStatus(status, user, expiresAt) {
+        const event = {
+            schema_version: OUTPUT_SCHEMA_VERSION,
+            event: "auth_status",
+            status,
+        };
+        if (user)
+            event.user = user;
+        if (expiresAt)
+            event.expires_at = expiresAt;
+        this.event(event);
+        if (!this.json) {
+            this.stdout.write(status === "signed_in" && user
+                ? `Signed in as ${user.display_name} (${user.email}).\n`
+                : "Not signed in to TeamClaws.\n");
+        }
+    }
+    logoutComplete(remoteConfirmed) {
+        this.event({
+            schema_version: OUTPUT_SCHEMA_VERSION,
+            event: "logout_complete",
+            status: remoteConfirmed ? "success" : "local_only_warning",
+        });
+        if (!this.json) {
+            this.stdout.write(remoteConfirmed
+                ? "Signed out from TeamClaws on this computer.\n"
+                : "Signed out on this computer. TeamClaws could not confirm remote revocation.\n");
+        }
+    }
+    servers(servers) {
+        this.event({
+            schema_version: OUTPUT_SCHEMA_VERSION,
+            event: "servers_list",
+            status: "success",
+            servers,
+        });
+        if (!this.json) {
+            if (servers.length === 0) {
+                this.stdout.write("No pairing-ready TeamClaws workspaces are available.\n");
+                return;
+            }
+            servers.forEach((server, index) => {
+                this.stdout.write(`${index + 1}. ${server.alias} — ${server.server_id} — ${server.workspace_url}\n`);
+            });
+        }
+    }
+    pairingComplete(serverId, origin, displayName, externalChatHandoff, capabilities, generatedAt) {
+        const workspace = {
+            server_id: serverId,
+            origin,
+            display_name: displayName,
+        };
+        const event = {
+            schema_version: OUTPUT_SCHEMA_VERSION,
+            event: "pairing_complete",
+            status: "success",
+            workspace,
+        };
+        if (externalChatHandoff)
+            event.external_chat_handoff = externalChatHandoff;
+        if (capabilities !== undefined) {
+            event.external_chat_capabilities = capabilities;
+            event.external_chat_capabilities_generated_at = generatedAt ?? null;
+        }
+        this.event(event);
+        if (!this.json) {
+            this.stdout.write(`Paired ${displayName} (${origin}).\n`);
+            if (capabilities)
+                this.renderInventory(capabilities, generatedAt);
+            else
+                this.stdout.write("Capabilities unavailable; use chat capabilities to refresh.\n");
+        }
+    }
+    pairingStatus(status, workspace) {
+        const event = {
+            schema_version: OUTPUT_SCHEMA_VERSION,
+            event: "pairing_status",
+            status,
+        };
+        if (workspace)
+            event.workspace = workspace;
+        this.event(event);
+        if (this.json)
+            return;
+        if (status === "paired" && workspace) {
+            this.stdout.write(`Paired with ${workspace.origin}.\n`);
+            return;
+        }
+        if (status === "credential_rejected" && workspace) {
+            this.stdout.write(`Saved pairing rejected by ${workspace.origin}.\n`);
+            return;
+        }
+        if (status === "unreachable" && workspace) {
+            this.stdout.write(`Could not verify pairing with ${workspace.origin} within five seconds.\n`);
+            return;
+        }
+        if (status === "unreachable") {
+            this.stdout.write("Could not safely verify the selected pairing.\n");
+            return;
+        }
+        this.stdout.write("Not paired with the selected workspace.\n");
+    }
+    capabilityInventory(workspace, capabilities) {
+        this.event({
+            schema_version: OUTPUT_SCHEMA_VERSION,
+            event: "chat_capabilities",
+            status: "success",
+            source: "refresh",
+            workspace,
+            external_chat_capabilities: capabilities,
+        });
+        if (!this.json)
+            this.renderInventory(capabilities, undefined, true);
+    }
+    renderInventory(capabilities, generatedAt, checkRecommendation = false) {
+        if (!capabilities.providers.some((provider) => provider.models.length > 0)) {
+            this.stdout.write("No provider/model is currently available.\n");
+        }
+        for (const provider of capabilities.providers) {
+            for (const model of provider.models) {
+                this.stdout.write(`${provider.id}/${model.id} — reasoning: ${model.supported_reasoning_levels.join(", ") || "none"}; fast: ${model.fast_mode_available && capabilities.policy.allow_fast_mode ? "available" : "unavailable"}\n`);
+            }
+        }
+        const recommendation = capabilities.recommended_selection;
+        const model = capabilities.providers
+            .find((provider) => provider.id === recommendation?.provider_key)
+            ?.models.find((item) => item.id === recommendation?.model_name);
+        const usable = recommendation &&
+            model &&
+            (!recommendation.reasoning_effort ||
+                model.supported_reasoning_levels.includes(recommendation.reasoning_effort)) &&
+            (!recommendation.fast_mode ||
+                (model.fast_mode_available && capabilities.policy.allow_fast_mode));
+        this.stdout.write(checkRecommendation && !usable
+            ? "No usable recommendation.\n"
+            : recommendation
+                ? `Recommended: ${recommendation.provider_key}/${recommendation.model_name}.\n`
+                : "No recommended provider/model.\n");
+        this.stdout.write(generatedAt
+            ? `Snapshot generated: ${generatedAt}.\n`
+            : "Generation time is not supplied by the capabilities endpoint.\n");
+    }
+    chatCapabilities(selection) {
+        this.externalChatEvent("capabilities_resolved", {
+            provider_key: selection.provider_key,
+            model_name: selection.model_name,
+            reasoning_effort: selection.reasoning_effort,
+            fast_mode_effective: selection.fast_mode,
+        });
+        if (!this.json)
+            this.stdout.write(`Using ${selection.provider_key}/${selection.model_name}.\n`);
+    }
+    chatSessionCreated(sessionId, requestId, status, ownerUrl) {
+        this.externalChatEvent("session_created", {
+            session_id: sessionId,
+            request_id: requestId,
+            status,
+            owner_conversation_url: ownerUrl,
+        });
+        if (!this.json)
+            this.stdout.write(`Created external chat session ${sessionId}.\n`);
+    }
+    chatRequestStatus(sessionId, requestId, status, revision) {
+        this.externalChatEvent("request_status_changed", {
+            session_id: sessionId,
+            request_id: requestId,
+            status,
+            revision,
+        });
+        if (!this.json)
+            this.stdout.write(`Request status: ${status}.\n`);
+    }
+    chatApprovalRequired(sessionId, requestId, ownerUrl) {
+        this.externalChatEvent("approval_required", {
+            session_id: sessionId,
+            request_id: requestId,
+            status: "awaiting_approval",
+            owner_conversation_url: ownerUrl,
+        });
+        if (!this.json)
+            this.stdout.write(`Owner approval required in TCChat: ${ownerUrl}\n`);
+    }
+    chatAssistantMessage(sessionId, requestId, messageId, body, provider, model) {
+        this.externalChatEvent("assistant_message", {
+            session_id: sessionId,
+            request_id: requestId,
+            message_id: messageId,
+            body_text: body,
+            provider_key: provider,
+            model_name: model,
+        });
+        if (!this.json)
+            this.stdout.write(`${body}\n`);
+    }
+    chatRequestSucceeded(sessionId, requestId, responseCount, ownerUrl) {
+        this.externalChatEvent("request_succeeded", {
+            session_id: sessionId,
+            request_id: requestId,
+            status: "succeeded",
+            response_count: responseCount,
+            owner_conversation_url: ownerUrl,
+        });
+        if (!this.json)
+            this.stdout.write(`Open this conversation in TCChat: ${ownerUrl}\n`);
+    }
+    chatRequestFailed(sessionId, requestId, status, code, detail, ownerUrl) {
+        this.externalChatEvent("request_failed", {
+            session_id: sessionId,
+            request_id: requestId,
+            status,
+            error_code: code,
+            error_detail: detail,
+            owner_conversation_url: ownerUrl,
+        });
+        if (!this.json)
+            this.stderr.write(`Error: ${detail}\n`);
+    }
+    error(error) {
+        const event = {
+            schema_version: OUTPUT_SCHEMA_VERSION,
+            event: "error",
+            status: "error",
+            code: error.code,
+            message: error.message,
+            retryable: error.retryable,
+        };
+        if (error.retryAfterSeconds !== undefined) {
+            event.retry_after_seconds = error.retryAfterSeconds;
+        }
+        if (this.json)
+            this.stdout.write(`${JSON.stringify(event)}\n`);
+        else
+            this.stderr.write(`Error: ${error.message}\n`);
+    }
+    event(event) {
+        if (this.json)
+            this.stdout.write(`${JSON.stringify(event)}\n`);
+    }
+    externalChatEvent(event, facts) {
+        this.event({
+            schema_version: OUTPUT_SCHEMA_VERSION,
+            event,
+            ...facts,
+        });
+    }
+}
+//# sourceMappingURL=output.js.map

package/dist/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAcvD,MAAM,OAAO,MAAM;IAEE;IACA;IACA;IAHnB,YACmB,IAAa,EACb,SAAmB,OAAO,CAAC,MAAM,EACjC,SAAmB,OAAO,CAAC,MAAM;QAFjC,SAAI,GAAJ,IAAI,CAAS;QACb,WAAM,GAAN,MAAM,CAA2B;QACjC,WAAM,GAAN,MAAM,CAA2B;IACjD,CAAC;IAEJ,YAAY,CAAC,GAAW;QACtB,IAAI,CAAC,KAAK,CAAC;YACT,cAAc,EAAE,qBAAqB;YACrC,KAAK,EAAE,wBAAwB;YAC/B,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,cAAc,CACZ,GAAW,EACX,QAAgB,EAChB,WAAyB;QAEzB,MAAM,KAAK,GAA4B;YACrC,cAAc,EAAE,qBAAqB;YACrC,KAAK,EAAE,0BAA0B;YACjC,GAAG;YACH,SAAS,EAAE,QAAQ;SACpB,CAAC;QACF,IAAI,WAAW;YAAE,KAAK,CAAC,YAAY,GAAG,WAAW,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;gBAChD,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,qCAAqC,GAAG,mBAAmB,QAAQ,IAAI,CACxE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,aAAa,CAAC,IAAc;QAC1B,IAAI,CAAC,KAAK,CAAC;YACT,cAAc,EAAE,qBAAqB;YACrC,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,SAAS;YACjB,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,6BAA6B,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,KAAK,MAAM,CACpE,CAAC;IACN,CAAC;IAED,UAAU,CACR,MAAkC,EAClC,IAAe,EACf,SAAkB;QAElB,MAAM,KAAK,GAA4B;YACrC,cAAc,EAAE,qBAAqB;YACrC,KAAK,EAAE,aAAa;YACpB,MAAM;SACP,CAAC;QACF,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QAC5B,IAAI,SAAS;YAAE,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,MAAM,KAAK,WAAW,IAAI,IAAI;gBAC5B,CAAC,CAAC,gBAAgB,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,KAAK,MAAM;gBACxD,CAAC,CAAC,+BAA+B,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,cAAc,CAAC,eAAwB;QACrC,IAAI,CAAC,KAAK,CAAC;YACT,cAAc,EAAE,qBAAqB;YACrC,KAAK,EAAE,iBAAiB;YACxB,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB;SAC3D,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,eAAe;gBACb,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,+EAA+E,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,OAAwB;QAC9B,IAAI,CAAC,KAAK,CAAC;YACT,cAAc,EAAE,qBAAqB;YACrC,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,SAAS;YACjB,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,wDAAwD,CACzD,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;gBAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,GAAG,KAAK,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,SAAS,MAAM,MAAM,CAAC,aAAa,IAAI,CAClF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,eAAe,CACb,QAAgB,EAChB,MAAc,EACd,WAAmB,EACnB,mBAAyC,EACzC,YAAyC,EACzC,WAA2B;QAE3B,MAAM,SAAS,GAAG;YAChB,SAAS,EAAE,QAAQ;YACnB,MAAM;YACN,YAAY,EAAE,WAAW;SAC1B,CAAC;QACF,MAAM,KAAK,GAA4B;YACrC,cAAc,EAAE,qBAAqB;YACrC,KAAK,EAAE,kBAAkB;YACzB,MAAM,EAAE,SAAS;YACjB,SAAS;SACV,CAAC;QACF,IAAI,mBAAmB;YAAE,KAAK,CAAC,qBAAqB,GAAG,mBAAmB,CAAC;QAC3E,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,0BAA0B,GAAG,YAAY,CAAC;YAChD,KAAK,CAAC,uCAAuC,GAAG,WAAW,IAAI,IAAI,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,WAAW,KAAK,MAAM,MAAM,CAAC,CAAC;YAC1D,IAAI,YAAY;gBAAE,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;;gBAEhE,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,+DAA+D,CAChE,CAAC;QACN,CAAC;IACH,CAAC;IAED,aAAa,CACX,MAAqB,EACrB,SAGC;QAED,MAAM,KAAK,GAA4B;YACrC,cAAc,EAAE,qBAAqB;YACrC,KAAK,EAAE,gBAAgB;YACvB,MAAM;SACP,CAAC;QACF,IAAI,SAAS;YAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACtB,IAAI,MAAM,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,qBAAqB,IAAI,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,aAAa,IAAI,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,iCAAiC,SAAS,CAAC,MAAM,yBAAyB,CAC3E,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjE,CAAC;IAED,mBAAmB,CACjB,SAAgD,EAChD,YAAiC;QAEjC,IAAI,CAAC,KAAK,CAAC;YACT,cAAc,EAAE,qBAAqB;YACrC,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;YACjB,SAAS;YACT,0BAA0B,EAAE,YAAY;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;IAEO,eAAe,CACrB,YAAiC,EACjC,WAA2B,EAC3B,mBAAmB,GAAG,KAAK;QAE3B,IACE,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EACtE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACnE,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;YAC9C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,GAAG,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,iBAAiB,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,WAAW,KAAK,CAAC,mBAAmB,IAAI,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,IAAI,CAC9M,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,cAAc,GAAG,YAAY,CAAC,qBAAqB,CAAC;QAC1D,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS;aACjC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,cAAc,EAAE,YAAY,CAAC;YACjE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,cAAc,EAAE,UAAU,CAAC,CAAC;QAClE,MAAM,MAAM,GACV,cAAc;YACd,KAAK;YACL,CAAC,CAAC,cAAc,CAAC,gBAAgB;gBAC/B,KAAK,CAAC,0BAA0B,CAAC,QAAQ,CACvC,cAAc,CAAC,gBAAgB,CAChC,CAAC;YACJ,CAAC,CAAC,cAAc,CAAC,SAAS;gBACxB,CAAC,KAAK,CAAC,mBAAmB,IAAI,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,mBAAmB,IAAI,CAAC,MAAM;YAC5B,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,cAAc;gBACd,CAAC,CAAC,gBAAgB,cAAc,CAAC,YAAY,IAAI,cAAc,CAAC,UAAU,KAAK;gBAC/E,CAAC,CAAC,kCAAkC,CACzC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,WAAW;YACT,CAAC,CAAC,uBAAuB,WAAW,KAAK;YACzC,CAAC,CAAC,iEAAiE,CACtE,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,SAKhB;QACC,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,EAAE;YAC9C,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;YAC5C,mBAAmB,EAAE,SAAS,CAAC,SAAS;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,SAAS,SAAS,CAAC,YAAY,IAAI,SAAS,CAAC,UAAU,KAAK,CAC7D,CAAC;IACN,CAAC;IAED,kBAAkB,CAChB,SAAiB,EACjB,SAAiB,EACjB,MAAc,EACd,QAAgB;QAEhB,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE;YACxC,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,MAAM;YACN,sBAAsB,EAAE,QAAQ;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,SAAS,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,iBAAiB,CACf,SAAiB,EACjB,SAAiB,EACjB,MAAc,EACd,QAAgB;QAEhB,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,EAAE;YAC/C,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,oBAAoB,CAClB,SAAiB,EACjB,SAAiB,EACjB,QAAgB;QAEhB,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,EAAE;YAC1C,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE,mBAAmB;YAC3B,sBAAsB,EAAE,QAAQ;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,QAAQ,IAAI,CAAC,CAAC;IAC1E,CAAC;IAED,oBAAoB,CAClB,SAAiB,EACjB,SAAiB,EACjB,SAAiB,EACjB,IAAY,EACZ,QAAgB,EAChB,KAAa;QAEb,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,EAAE;YAC1C,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,QAAQ;YACtB,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,oBAAoB,CAClB,SAAiB,EACjB,SAAiB,EACjB,aAAqB,EACrB,QAAgB;QAEhB,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,EAAE;YAC1C,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE,WAAW;YACnB,cAAc,EAAE,aAAa;YAC7B,sBAAsB,EAAE,QAAQ;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,QAAQ,IAAI,CAAC,CAAC;IACzE,CAAC;IAED,iBAAiB,CACf,SAAiB,EACjB,SAAiB,EACjB,MAAc,EACd,IAAY,EACZ,MAAc,EACd,QAAgB;QAEhB,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE;YACvC,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,MAAM;YACN,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,MAAM;YACpB,sBAAsB,EAAE,QAAQ;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,MAAM,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,KAAqB;QACzB,MAAM,KAAK,GAA4B;YACrC,cAAc,EAAE,qBAAqB;YACrC,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;QACF,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC1C,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,iBAAiB,CAAC;QACtD,CAAC;QACD,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;YAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,KAA8B;QAC1C,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IAEO,iBAAiB,CACvB,KAAa,EACb,KAA8B;QAE9B,IAAI,CAAC,KAAK,CAAC;YACT,cAAc,EAAE,qBAAqB;YACrC,KAAK;YACL,GAAG,KAAK;SACT,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/pairing.js

@@ -0,0 +1,245 @@
+import { parseCapabilityInventory } from "./external-chat.js";
+import { TeamClawsError } from "./errors.js";
+import { PAIRING_STATUS_TIMEOUT_MS } from "./constants.js";
+import { errorFromResponse, requestJson, } from "./http.js";
+import { directTargetUrl, isObject, parsePairingCredential, parseVerifiedDevice, parseVerifiedWorkspace, requireInteger, } from "./validation.js";
+import { openExternalBrowser } from "./browser.js";
+export class PairingClient {
+    fetcher;
+    store;
+    output;
+    openBrowser;
+    now;
+    wait;
+    constructor(options) {
+        this.fetcher = options.fetcher ?? fetch;
+        this.store = options.store;
+        this.output = options.output;
+        this.openBrowser = options.openBrowser ?? openExternalBrowser;
+        this.now = options.now ?? Date.now;
+        this.wait = options.wait ?? waitFor;
+    }
+    async status(target, signal) {
+        let credential;
+        try {
+            credential = await this.store.findWorkspace(target);
+        }
+        catch {
+            this.output.pairingStatus("unreachable");
+            return "unreachable";
+        }
+        if (!credential) {
+            this.output.pairingStatus("not_paired");
+            return "not_paired";
+        }
+        const workspace = {
+            server_id: credential.server_id,
+            origin: credential.origin,
+            display_name: credential.display_name,
+        };
+        try {
+            const response = await requestJson(this.fetcher, `${credential.origin}/teamclaws-admin/api/device-pairings/me/`, {
+                headers: {
+                    Authorization: `Bearer ${credential.device_id}:${credential.device_token}`,
+                },
+                timeoutMs: PAIRING_STATUS_TIMEOUT_MS,
+                ...(signal ? { signal } : {}),
+            });
+            if (response.status === 401 || response.status === 403) {
+                this.output.pairingStatus("credential_rejected", workspace);
+                return "credential_rejected";
+            }
+            if (response.status < 200 || response.status >= 300) {
+                this.output.pairingStatus("unreachable", workspace);
+                return "unreachable";
+            }
+            const displayName = parseVerifiedDevice(response.body, credential.device_id);
+            this.output.pairingStatus("paired", {
+                ...workspace,
+                display_name: displayName,
+            });
+            return "paired";
+        }
+        catch (error) {
+            if (signal?.aborted)
+                throw error;
+            this.output.pairingStatus("unreachable", workspace);
+            return "unreachable";
+        }
+    }
+    async complete(pending, deviceName, noOpen, signal) {
+        this.output.pairingBrowser(pending.verification_uri_complete, pending.user_code, pending.agent_action);
+        if (!noOpen)
+            await this.openBrowser(pending.verification_uri_complete);
+        let credential;
+        try {
+            credential = await this.poll(pending, signal);
+            const initial = {
+                version: 1,
+                server_id: pending.server_id,
+                origin: pending.target.origin,
+                display_name: deviceName,
+                device_id: credential.device_id,
+                device_token: credential.device_token,
+                created_at: new Date(this.now()).toISOString(),
+            };
+            await this.store.writeWorkspace(initial);
+            try {
+                const stored = await this.store.readWorkspace(pending.server_id);
+                if (!stored)
+                    throw verificationError();
+                const verification = await this.verify(pending, stored, signal);
+                const verified = {
+                    ...stored,
+                    display_name: verification.display_name,
+                };
+                await this.store.writeWorkspace(verified);
+                let snapshot;
+                let generatedAt;
+                if (Object.hasOwn(credential, "external_chat_capabilities")) {
+                    snapshot = null;
+                    generatedAt = null;
+                    try {
+                        const timestamp = credential.external_chat_capabilities_generated_at;
+                        if (typeof timestamp === "string" &&
+                            /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|\+00:00)$/.test(timestamp) &&
+                            Number.isFinite(Date.parse(timestamp))) {
+                            snapshot = parseCapabilityInventory(credential.external_chat_capabilities);
+                            generatedAt = timestamp;
+                        }
+                    }
+                    catch {
+                        // Optional inventory must not invalidate a successfully verified credential.
+                    }
+                }
+                this.output.pairingComplete(pending.server_id, pending.target.origin, verification.display_name, verification.external_chat_handoff, snapshot, generatedAt);
+            }
+            catch (error) {
+                await this.store.removeWorkspace(pending.server_id);
+                throw error;
+            }
+        }
+        catch (error) {
+            if (signal?.aborted) {
+                await this.cancel(pending).catch(() => undefined);
+                throw new TeamClawsError("cancelled", "Pairing was cancelled.", {
+                    exitCode: 8,
+                });
+            }
+            throw error;
+        }
+        finally {
+            credential = undefined;
+            void credential;
+        }
+    }
+    async poll(pending, signal) {
+        const deadline = this.now() + pending.expires_in * 1_000;
+        let intervalSeconds = pending.interval;
+        const pollUrl = directTargetUrl(pending.target, pending.target.token_poll_path);
+        while (this.now() < deadline) {
+            if (signal?.aborted)
+                throw new TeamClawsError("cancelled", "Pairing was cancelled.");
+            const response = await requestJson(this.fetcher, pollUrl, {
+                method: "POST",
+                body: { device_code: pending.device_code },
+                ...(signal ? { signal } : {}),
+            });
+            if (response.status >= 200 && response.status < 300) {
+                if (response.status === 202) {
+                    intervalSeconds = pendingInterval(response, intervalSeconds);
+                    await this.wait(intervalSeconds * 1_000, signal);
+                    continue;
+                }
+                return parsePairingCredential(response.body);
+            }
+            if (response.status === 429) {
+                intervalSeconds = slowDownInterval(response, intervalSeconds);
+                await this.wait(intervalSeconds * 1_000, signal);
+                continue;
+            }
+            const protocolError = errorFromResponse(response, "pairing_failed");
+            throw mapPairingError(protocolError);
+        }
+        throw new TeamClawsError("pairing_expired", "The pairing request expired.", { exitCode: 7 });
+    }
+    async cancel(pending) {
+        const response = await requestJson(this.fetcher, directTargetUrl(pending.target, pending.target.cancellation_path), {
+            method: "POST",
+            body: { device_code: pending.device_code },
+            timeoutMs: 5_000,
+        });
+        if (response.status < 200 || response.status >= 300)
+            throw errorFromResponse(response, "cancel_failed");
+    }
+    async verify(pending, credential, signal) {
+        const response = await requestJson(this.fetcher, directTargetUrl(pending.target, pending.target.credential_verification_path), {
+            headers: {
+                Authorization: `Bearer ${credential.device_id}:${credential.device_token}`,
+            },
+            ...(signal ? { signal } : {}),
+        });
+        if (response.status < 200 || response.status >= 300)
+            throw verificationError();
+        return parseVerifiedWorkspace(response.body, credential.device_id, credential.origin);
+    }
+}
+function pendingInterval(response, fallback) {
+    if (!isObject(response.body) ||
+        response.body.status !== "authorization_pending") {
+        throw new TeamClawsError("invalid_response", "The workspace returned an invalid pending response.", {
+            exitCode: 9,
+        });
+    }
+    return requireInteger(response.body.interval ?? fallback, "polling interval", 1, 60);
+}
+function slowDownInterval(response, current) {
+    const header = Number(response.headers.get("retry-after"));
+    if (Number.isInteger(header) && header > 0 && header <= 300)
+        return header;
+    if (isObject(response.body)) {
+        const seconds = Number(response.body.retry_after_seconds);
+        if (Number.isInteger(seconds) && seconds > 0 && seconds <= 300)
+            return seconds;
+    }
+    return Math.min(current + 5, 60);
+}
+function mapPairingError(error) {
+    if (["denied", "authorization_denied", "pairing_denied"].includes(error.code)) {
+        return new TeamClawsError("pairing_denied", "The workspace owner denied pairing.", { exitCode: 6 });
+    }
+    if (["expired", "pairing_expired"].includes(error.code)) {
+        return new TeamClawsError("pairing_expired", "The pairing request expired.", { exitCode: 7 });
+    }
+    if (["cancelled", "canceled", "pairing_cancelled"].includes(error.code)) {
+        return new TeamClawsError("pairing_cancelled", "The pairing request was cancelled.", { exitCode: 8 });
+    }
+    return error;
+}
+function verificationError() {
+    return new TeamClawsError("credential_verification_failed", "The workspace credential could not be verified and was not retained.", { exitCode: 9 });
+}
+async function waitFor(milliseconds, signal) {
+    await new Promise((resolve, reject) => {
+        if (signal?.aborted) {
+            reject(new TeamClawsError("cancelled", "Pairing was cancelled.", {
+                exitCode: 8,
+            }));
+            return;
+        }
+        const finish = () => {
+            signal?.removeEventListener("abort", abort);
+            resolve();
+        };
+        const timer = setTimeout(finish, milliseconds);
+        const abort = () => {
+            clearTimeout(timer);
+            signal?.removeEventListener("abort", abort);
+            reject(new TeamClawsError("cancelled", "Pairing was cancelled.", {
+                exitCode: 8,
+            }));
+        };
+        signal?.addEventListener("abort", abort, { once: true });
+    });
+}
+//# sourceMappingURL=pairing.js.map